PI79806: RAD 9.6 USERS MAY NOT BE ABLE TO CONNECT TO A SECURED WAS V8.5.XSERVER. 100% HUNG

Rational Application Developer for WebSphere Software Fix Pack (9.6.1.2) for 9.6.1

APAR status

• Closed as program error.

Error description

• Some Rational Application Developer (RAD) v9.6 users may not be
  able to connect to a local secured ( WebSphere Application
  Server (WAS) 8.5.x server, even though the server has started.
  It hangs showing 100% ..Starting in the Server tools view. The
  same problem can happend with a remote secured server. In the
  WAS 8.5.x server SystemOut.log you would see:
  
  
  ...
  ..
  [3/29/17 14:42:29:050 EDT] 00000001 WsServerImpl  A   WSVR0001I:
  Server
  server1 open for e-business
  [3/29/17 14:42:35:451 EDT] 00000049 SSLHandshakeE E   SSLC0008E:
  Unable
  to initialize SSL connection.  Unauthorized access was denied or
  security settings have expired.  Exception is
  javax.net.ssl.SSLException: Unrecognized SSL message, plaintext
  connection?
   at com.ibm.jsse2.b.a(b.java:22)
  ..
  ----------
  
  INSTEAD of:
  
  ...
  ..
  [3/29/17 14:37:08:691 EDT] 00000001 WsServerImpl  A   WSVR0001I:
  Server
  server1 open for e-business
  [3/29/17 14:37:10:756 EDT] 00000047 ModelMgr      I   WSVR0801I:
  Initializing all server configuration models
  [3/29/17 14:37:11:113 EDT] 00000047 WorkSpaceMana A   WKSP0500I:
  Workspace configuration consistency check is disabled.
  ...
  ------------
  
  A local server can be started, but the JMX commands  from the
  server tools must succeed in establishing a secured SSL
  connection in order to work with the secured server and be aware
  of its state.
  Clicking the "Test Connection" button in the Server overview
  editor, even before requesting "Start",
  would indicate if you failed to get a connection and will have
  this problem.
  
  
  There are very similar symptoms in reported problem from
  previous RAD versions:
  https://www.ibm.com/developerworks/community/forums/html/topic?i
  d=77777777-0000-0000-0000-000014772790
  , but this is not the same
  
  One workaround was to start WAS outside RAD 9.6 on a cmd line
  and restart RAD to see it in started state in RAD Server view.
  However, this is the open source plugin:
  https://wiki.eclipse.org/EPP/Logging, that is causing that
  issue,
  The correct workaround is to disable Eclipse EPP logging:
  
  -Dorg.eclipse.epp.logging.aeri.ui.skipReports=true
  -Dorg.eclipse.epp.logging.aeri.skipReports=true
  
  
  RAD v9.6.0 is based on Eclipse 4.6 (Neon), while the previous
  RAD v9.5.0 is based on Eclipse 4.4.2 (Luna)
  Starting in Mars SP2 (Eclipse 4.5)/Neon (Eclipse 4.6), which
  newer versions of RAD are based on, the Eclipse open source EPP
  Logging plugin sets the SSL socket factory. In the past, RAD
  always set the SSL socket factory first, so nothing interferes
  with it. But now in RAD 9.6 the open source plugin may set it
  first, and it can only be set once per JVM. If that happens, RAD
  9.6 server tools are using the wrong ssl socketfactory for WAS
  
  Why do only some RAD96 users have this problem  ?
  A timing issue is suspected. or more precisely a race condition.
  If the open source plugin loads SSL socket factory faster than
  the one from RAD Server tools for WebSphere, then it happens
  

Local fix

• Add this to {RAD96/Eclipse install path}/eclipse.ini
  
  -Dorg.eclipse.epp.logging.aeri.ui.skipReports=true
  -Dorg.eclipse.epp.logging.aeri.skipReports=true
  
  Those two arguments disable that open source plugin that sets
  the ssl socket factory.
  Eclipse EPP Logging is part of the automated error reporting for
  plugins. It sends error reports to plugins that sign up for it,
  and shouldn't affect the RAD user in any way
  It doesn't affect normal .log functionality or tracing  in RAD.
  If this does not help, contact IBM Support for RAD
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Rational Application Developer users                         *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * [RAD 9.6.1.2] USERS MAY NOT BE ABLE TO CONNECT TO A SECURED  *
  * WAS V8.5.X SERVER. 100% HUNG                                 *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  

Problem conclusion

• The technote is
  
  https://www.ibm.com/support/knowledgecenter/en/SSHR6W/com.ibm.we
  bsphere.wdt.doc/topics/rconremserv.html
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  RATL APP DEV WI

• Fixed component ID

  5724J1901

Applicable component levels

• R961 PSY

     UP